Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hello All,Recently found there are lots of VPN anyconnect user authenticated last year but halted in ISE live session, and occupied more base license. Actually, the users had dropped on the ASA devices, but still see active live session on ISE.I trie...
Hello All,We have ISE (Version 2.6.0.156) authenticate anyconnect remote VPN and TACACS for network devices(Total 36 devices including Cisco ASA, routers, and switches).Actually, we don't have much remote anyconnect vpn client, less than 100. but the...
Hello All, I have HA PIX515E and Version is 7.2(2). but the HA is not working recently.the primary firewall Unable to sync configuration from Active. the interface status is wired.outside and inside interface are down, protocol up. but the switch whi...
Dear all, I want to know if ASR9k support "BGP Support for IP Prefix Export from a VRF Table into the Global Table"and "BGP Support for IP Prefix Import from a VRF Table into the Global Table" feature? the IOS command is export ipv4 unicast and i...
Hello all,The L2VPN between PE1 and PE2, both PE need use loopback1(just for L2 VPN) as peering.PE1----MPLS backbone----PE2The L2 VPN is working without problem. I expect use loopback1 to establish LDP neighbor, but LDP neigbor established between PE...
Hello Rodrigo,We have 2 nodes primary and backup. Do we need reload both at same time? Both enabled monitoring.I also see some stuck live session in "Started" status.probably due to network connection issue loss the accounting packets, it could happe...
Thanks, AhollifieldI see the current latest patch is 2.6.0.156-Patch12. We can schedule to install this patch. Will consider upgrade 3.x in the future, but not now.I want to clean up the lost of dead live session which doesn't exist on ASA5500 anymor...
Hello Rodrigo,Check on vpn configuration on ASA5500, missed the accounting group. I have just added it. Could avoid session halt next time. Thank you so much.But still can not terminate these old live session on ISE. Mar 08 2023 23:06:33: %ASA-4-1091...
Yes, accounting-config in place for any connection users. tunnel-group SSLVPN type remote-accesstunnel-group SSLVPN general-attributesaddress-pool SSLVPN_POOL_1authentication-server-group ISERadius LOCALaccounting-server-group ISERadiusdefault-group-...
